tree c0c47c8a0cccf15a416f56a91f7c24525ba946a3
parent 4685d501e83eed98e51179bfff266880d7995960
author Chris Jones <christopher.jones@arm.com> 1606317159 +0000
committer Chris Jones <christopher.jones@arm.com> 1607014610 +0000

Fix potential DoS by limiting number sizes in exponentiation

Check that the exponent and modulus is below `MBEDTLS_MPI_MAX_BITS` before
performing a time expensive operation (modular exponentiation). This prevents
a potential DoS from Diffie-Hellman computations with extremely
large key sizes.

Signed-off-by: Chris Jones <christopher.jones@arm.com>